Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/148d2078-1122-3908-b198-db0b1c465bcc.roa
File: 148d2078-1122-3908-b198-db0b1c465bcc.roa (raw, json)
Hash identifier: 8oOSOVVywM0lwshNrwQFEjon/bIYGmjfWNmOLWkQwVg=
Subject key identifier: 8D:E9:0A:1C:A9:64:1A:DA:1B:94:FA:C3:51:40:90:F6:CC:D5:8C:E4
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858491AA6C8AAB00C4FC697ED3160
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/148d2078-1122-3908-b198-db0b1c465bcc.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 7106
IP address blocks: 68.65.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:c8:aa:b0:0c:4f:c6:97:ed:31:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=401c5fff-c6ee-45d5-836a-0945bf6aeba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:1c:8d:ab:0d:61:c7:63:f8:b0:8c:2f:e9:
a2:48:0b:1a:3c:01:eb:d2:88:28:e1:de:ef:17:2a:
ef:5b:1f:48:ed:ca:34:0d:4e:ec:2f:e5:e3:a8:10:
73:a3:82:3e:fc:90:d3:e5:01:6f:3f:4a:fe:74:04:
35:d2:07:2a:72:ee:58:46:98:a3:94:74:45:f1:40:
ab:e4:2b:76:f5:32:68:3f:e1:82:ff:6e:90:b6:ea:
58:15:32:0c:51:e7:05:12:f4:71:33:23:e3:2a:d9:
ee:f9:bc:6a:cf:e5:b8:ce:01:f8:67:02:ab:0b:e0:
ff:1d:be:52:3d:72:db:57:ba:f9:24:f9:95:70:2c:
37:11:00:7b:8c:96:72:56:f6:83:c0:b6:1e:65:62:
88:74:63:5e:f7:2b:7c:e2:d2:00:cc:09:30:d5:d9:
63:ea:68:3a:ad:28:fc:b6:49:93:3d:4d:0c:ac:38:
e9:8a:9e:96:0e:97:57:71:87:02:84:2b:c9:6d:e5:
67:ee:77:a7:03:dd:6d:90:0a:32:48:70:9d:98:4d:
eb:fb:2c:da:f6:03:ee:93:14:a6:89:26:91:19:93:
a8:f9:1f:df:fa:f5:30:8b:bb:9d:02:aa:01:30:f8:
2e:49:b7:65:cb:e0:77:2a:3e:c2:65:4b:44:05:79:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E9:0A:1C:A9:64:1A:DA:1B:94:FA:C3:51:40:90:F6:CC:D5:8C:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/148d2078-1122-3908-b198-db0b1c465bcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
68.65.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:85:e8:97:8a:fd:ba:15:de:e1:2e:05:27:c9:be:27:30:a7:
43:47:0f:44:15:bf:fd:b9:eb:72:af:de:08:ed:8e:68:b5:3f:
f3:57:21:90:28:6a:15:f1:d2:ea:51:0b:19:74:17:3b:3b:0e:
8b:cc:31:46:f1:79:5e:5e:9e:5f:87:95:6d:4d:7b:75:87:b1:
a9:93:13:2a:8f:b5:95:95:3d:9b:27:0d:94:ec:36:83:a9:35:
82:2b:e4:1a:f9:1e:49:3b:e7:ed:39:f3:64:bf:71:05:48:f1:
2d:37:c7:08:58:e2:36:b7:19:78:ff:8e:6f:76:57:1d:b8:3c:
b3:a8:a1:be:bb:1c:67:97:3e:b1:f7:a5:43:5a:98:9b:fc:67:
c8:fd:60:dd:3a:8b:6d:b0:34:82:5d:8a:36:90:8e:d8:82:a9:
13:98:64:2d:d5:1b:b9:70:9e:70:57:1f:04:26:7e:4d:eb:56:
11:3b:bd:53:25:fc:c8:fa:ee:44:c5:8a:68:d4:19:fd:b3:19:
3e:88:51:af:94:8b:28:0c:2e:69:30:8d:58:7c:bf:fa:89:00:
c2:28:cf:50:df:b9:cf:ad:22:b3:5d:e9:33:c0:67:3b:fd:05:
d0:1d:e8:98:04:d0:72:c6:d9:96:4f:d5:ad:72:1a:58:11:6a:
db:53:c9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:33 2025 by rpki-client